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Time To Remediate 
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True Measure of Effectiveness of Security Program 
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Digital | 
Transformation | aj 
is accelerating 


Rapid Adoption of New Processes 
and Technologies 


Elastic, 
Kafka, 
Cassandra, 


0 Flink, 
Spark, etc. 
DevOps 
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Infrastructure is Increasingly Hybrid 
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Cloud, bare-metal, 
Containers, Endpoints, © 
Mobility, OT, loT, APIs, 

ete 
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Security Challenges 


Increasing surface area 
Decreasing visibility 
Increasing TTR 
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Reduce TTR 


Real-time context with continuous data 
collection 


Powerful analytics platform to correlate 
multiple datapoints and detect issues 


Real-time response capabilities 


Powerful decision engine to 
transparently orchestrate the response 
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Home Security Solutions 


Nest Home Security Sensors 
Nest Aware Subscription 
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Enterprise Security Tools Today 


Point solutions 
Multiple agents 
Multiple consoles 
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Integrations? 


Integrate point solutions 


But then too many point to 
point integrations 


Doesn't provide full context 
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The Rise of the SIEM 


Tie together point solutions 
But still point solutions! A- 
+ UEBA + ML/AI 


Detection? Sort of with low confidence 


What About Response? 


Additional point solutions to 
respond to 


Well now we need new app - SOAR 


Ties point solutions together - 
again! 


Evolution of the Qualys Cloud 
Platform 
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Remember those 19+ Apps? 
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Evolution of the Qualys 
Cloud Platform 


Unifying IT, Security & Compliance 


Consolidating the Stack: reducing 
point solutions, their agents and 
consoles 


Reduce TTR 
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Best TTR ever? 


Cloud & Container Leading the Way 


DevOps in CI/CD 


Azure built-in security >» «+ 
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Evolution of the Qualys 
Cloud Platform 


Cloud-based platform build into 


your DevOps - — 


Qualys Next-Gen Initiatives 
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Next-Gen Initiatives 2020 


Now introducing Qualys 
Respond 


Adding Security Analytics & 
Orchestration 
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Comprehensive Response 
Capabilities 


772 


Covering servers, endpoints, mobile, network, 
web applications, cloud & containers 
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Security Analytics, 
Correlation & Data Lake 


Qualys built-in! 
Plug-n-play analytics 


Powerful cloud-based 
correlation and analytics of 
known & unknown threats 
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SOAR 


Qualys built-in! 
Granular flexible playbooks 


Quickly respond with complex 
actions 
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Advanced Correlation & Analytics 


ML/AI Service Orchestration & Automation UEBA 
Patterns | Outlier | Predictive SoC Integration | Playbooks | Response User & Entity Behavior Analytics 
Threat Hunting Security Analytics Advanced Correlation 
Search | Exploration | Behavior Graph Anomaly | Visualization | Dashboard Actionable Insights | Out-of-box Rules 


Qualys Security Data Lake Platform 


Data Ingestion | Normalization | Enrichment | Governance 
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Network Security Server End Point Qualys Apps Apps Cloud Users loT 


Qualys Quick Connectors 
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Evolving Qualys Cloud Platform to the 
Next Level 


Q 


Single platform for detection & response with 
built-in orchestration 
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Introducing (e) Qualys. | 


One solution to discover, assess, prioritize and patch critical vulnerabilities 
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VMDR with Built-in 
Orchestration 
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New prioritization 
engine 


Combining real-time 
threat intelligence, asset 
context and machine 
learning 


Accurately pinpoint 
patches for most lethal 
vulnerabilities instantly 


End-to-end workflows & 


real-time, interactive 
dashboards 
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ASSETS 
Tag 
LE [nana] | er 
| operations 
VULNERABILITIES 
CVSS Score md 
1 3 43 High Med Low 
(310) (320) (713) 
Total Service Level 
Vulnerabilities Agreement Pre-SLA 0-15+ Days 16-30 Days 31-60Days 61-90 Days 
(260) (122) (108) (412) (211) 
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ily Exploitable (65) Machine Learning Probability 


Qualys Threat Prioritization 


@ Active Attacks 
6 Exploit Kit Available 


Vulnerable to DOS 


Prioritized Vulnerabilities Deploy Patches 


E lu 


. O of Total Vulnerabilities 
2:75% 


Patch Now 
QD CVE TITLE PRIORITIZATION SCORE 
91534 CVE-2019-0708 Microsoft Windows Remote Desktop Services Remote Code Execution... Å 


371361 — CVE-2018-15982 Adobe Security Update for Flash Player (APSB18-42) a 
1 more 


Ba 38 hosts 


on 10% of total Hosts 


VMDR 


90+ Days 
(230) 


O High Data Loss 
© DOS External 
(13) Public Exploit © Wormable 


HOSTS 
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Qualys VMDR 


Fastest platform to go from discovering new 
assets to patching its most critical vulnerabilities 
with contextual prioritization 
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Cloud Platform Architecture 


Out-of-Band Sensors 


Internet 


Cloud . 
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Cloud Connectors 
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Physical 


Legacy data centers 
Corporate infrastructure 


Continuous security and 
compliance scanning 


Qualys Sensor Platform 
Scalable, self-updating & centrally managed 
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Virtual 


Private cloud infrastructure 
Virtualized Infrastructure 


Continuous security and 
compliance scanning 
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Cloud/Container 
Commercial laaS & PaaS 
clouds 
Pre-certified in market place 


Fully automated with API 
orchestration 


Continuous security and 
compliance scanning 
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Cloud Agents 


Light weight, multi-platform 


On premise, elastic 
cloud & endpoints 


Real-time data collection 


Continuous evaluation on 
platform for security and 
compliance 


Passive 


Passively sniff on network 


Real-time device discovery & 
identification 


Identification of APT network 
traffic 


Extract malware files from 
network for analysis 
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API 


Integration with Threat Intel 
feeds 


CMDB Integration 


Log connectors 


Qualys Cloud Platform 


19+ products providing comprehensive 
suite of security solutions 


12,200+ customers 


8 shared cloud platforms across North og SE 
America, Europe & Asia @ 

85+ private clouds platforms deployed 

globally... on-prem, AWS, Azure, GCP je i 

19+ PB storage and 27000 cores Os = 
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Qualys Cloud Platform 


3+ billion IP scans/Audits per year 

50,000+ Scanner Appliances 9 
28 million Cloud Agents 

2+ trillion security events annually 

5+ billion messages daily across Kafka O 
clusters . . 


3.2+ trillion data points indexed in our 
Elasticsearch clusters 
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Continued Platform 
Expansion 


ICS OT environments 


SaaS security & compliance 


More DRs Coming | 
Soon $) 
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Endpoint Detection & Response 
Cloud Detection & Response 
Container Detection & Response 
Mobile Device Detection & Response 
SaaS Security Detection & Response 
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